29 Configuring Policy Objects

The policies configuration object sets both operating policy for enterprise servers and users and denial of service (DOS) policy. This chapter details server and user policy. For information on DOS policy, see Configuring Denial of Service (DOS) objects.

The policy configuration object allows you to create policies that govern the routing of SIP phone calls and instant messages to recipients, and then back to the original caller or sender. A policy is set of one or more rules, each with defined conditions that operate using a specific SIP session configuration. When a SIP message registers with the ME, the SIP message (such as a SIP INVITE) is processed against the configured policies for matching strings. If a string match occurs in any of the configured policies, then those policies are enforced on that SIP call session.

If there are no policies that match the SIP message and call registration information, the call is either forwarded to the SIP call recipient or the call is dropped based on the settings in the default session configuration.

Rules and Condition Lists

A policy is identified by a unique name and can contain one or more rules. With each rule, you configure a condition list with a set of properties, as well as the session configuration properties that control the SIP session when the policy is being enforced. Condition list configuration is described in Configuring Condition List Objects.

Session Configuration

The session configuration defines the SIP call session settings to apply to SIP calls for which a configured policy exists. When a SIP call is received at the ME, the system registers the call and checks all policies and rules to determine how the call should be processed, including those services (such as registration, location, authentication, and accounting services) that should be applied to the SIP call. See Configuring Session Configuration Objects, for a description of each session configuration object.

For more information on ME policies, refer to the Oracle Communications OS-E Session Services Configuration Guide.

policies

Opens the gateway to the DOS policy and session policy objects.

Syntax

config vsp policies

Properties

None

session-policies

Sets the parameters used to configure policies for this VSP, for enterprise servers, and for users.

Syntax

config vsp policies session-policies

Properties

default-policy: Sets the default policy to apply to all SIP sessions. This policy acts as a baseline policy in effect at all times. More specific policy rules may override the default settings. Enter the path to a previously configured policy.

Default: There is no default setting

Example: set default-policy vsp policies session-policies policy default

outbound-policy: Apply a session configuration policy to a session as it egresses the ME.

Default: There is no default setting

Example: set outbound-policy vsp\tls\certificate policy1

policy

Opens the new or existing named policy object for editing.

Syntax

config vsp policies

Properties

None

rule

Opens the new or existing named policy rule object for editing. Properties of this object enable or disable the policy rule, and set a user-specified description of the rule. From this object you can open the condition-list object to set policy statements or the session-config object to configure baseline SIP session characteristics.

Syntax

config vsp policies session-policies policy name rule name

Properties

admin: Enables or disables the current rule associated with the named policy. If disabled, all other enabled rules under the named policy will still be checked against incoming SIP messages.

Default: enabled
Values: enabled | disabled

Example: set admin disabled

description: Specifies a textual description for this policy rule. Enclose the description in quotation marks and specify up to 64 characters.

Default: There is no default setting

Example: set description ”Rule to apply to SIP messages from LCS clients belonging to domain company123.com”

session-config

Opens the session-config object for editing. It is through this object that you set the session characteristics for SIP calls matching the specified policy. For a description of all session configuration subobjects, see Configuring Session Configuration Objects.

Syntax

config vsp policies session-policies policy name rule name session-config

Properties

None